MAL-2025-5988 Malicious code in router-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d79988cd859092569021535b2a0ed329cc589611cb68ee789a342c0a1b0945e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6014 Malicious code in okta-core-component (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32a2bc49ecdb3be636c0bbd744a8e1b52eb5b19d91316f69ce08d9cf870ed247 Any computer that has this package installed or running should be considered...

MAL-2025-5987 Malicious code in rollup-linux-riscv64-gnu (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8a98f596921acebe0065ab2b5beda61f909a0c6595ad8ce2845d1d76a78fb9e Any computer that has this package installed or running should be considered...

Malicious code in @gdcorp-digitalcare/ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8da7a1bf146c62ef01e4c0f8e5fb152aaff95eb02a94acb2909faff2779f3da8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5870 Malicious code in @gdcorp-commerce/cx-event-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10dd727785804adabaebb122da36be51c97a082214c8d6de8d70a1ad01f3b5e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5874 Malicious code in @gdcorp-digitalcare/ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8da7a1bf146c62ef01e4c0f8e5fb152aaff95eb02a94acb2909faff2779f3da8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5875 Malicious code in @gdcorp-digitalcare/ux-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fecefb3206cce5d5e5a87c2c7130d9cffdb74d4b163ca1bc8e14cedd902ae6b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5867 Malicious code in @ecommerce-cart-ui/client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bac1b682b09340a43e74619f9ac55f2be98bfb14eb37a21597fb9f81b46f4161 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5873 Malicious code in @gdcorp-commerce/cx-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28edf91ea21172ce7f3ff12d49071830bd423ed825a3b22b8e7228e1091cff42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5871 Malicious code in @gdcorp-commerce/cx-orders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ce80126682f56a0068ac541d5304235859cbf407b6945eee895e676fb186858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5917 Malicious code in grabcad-printers-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8860731583f8b23a37b8f806bd431150e444c82832ffd62d914ae5c0682dda8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5918 Malicious code in grabcad-ui-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee52ce65db4a7eae9515a5809a148be63f55d250702390c261cd05e173132799 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5936 Malicious code in modern-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 551ccc399991abf0310245b17e68d5526426644f1b0e41c7d7d6b1b1286a425f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5902 Malicious code in cmc-inferno (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db96f961787fc8fc35c246e14979af463d5ced86a881c2126d03b95423ff0cba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5898 Malicious code in blue-einsteinium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d29bce29ab50051cea7b565e77089c60c66a34ba8f074b85f8e835a25e8c7f49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5961 Malicious code in telegram-pk-auto-sender (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0440cb1173d59d4994a01cb91522080aef6f9ce7987bcf54f32ebf0ae8a3581 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5944 Malicious code in okta-template-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa63c053c0856df8269f5f2fed7960e203427d897b1fccc26acdfbaf8108cbc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5921 Malicious code in healthbottestservice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ca7387a0c1ef2ec15fea2dad8418095f55af6c8584c7a7e25ae06f267546e51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5929 Malicious code in jsonloggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d54b4c8a926e93beec48e7aeb67936e9095d34e48f015fc167af0fa33e11574e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5927 Malicious code in jsonli-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e8776bc06346e1791322c97de75dbe5905bb93e7c671205b1d3fec085ac75db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...